SV-26364r1_rule
V-22314
GEN001210
GEN001210
CAT II
10
Remove the extended ACL from the file.
# getfacl [file with extended ACL]
Remove each ACE returned.
# setfacl -d [ACE] [file with extended ACL]
Verify all system command files have no extended ACLs.
# ls -lL /etc /bin /usr/bin /usr/lbin /usr/ucb /sbin /usr/sbin
If the permissions include a "+", the file has an extended ACL, this is a finding.
V-22314
False
GEN001210
Verify all system command files have no extended ACLs.
# ls -lL /etc /bin /usr/bin /usr/lbin /usr/ucb /sbin /usr/sbin
If the permissions include a "+", the file has an extended ACL, this is a finding.
M
System Administrator
22